Accrewal ("we", "us", "our") operates the Accrewal platform. Contact us at: support@accrewal.com
1. Data we collect
When you use Accrewal, we collect:
- Account data — name, email address, date of birth, country, phone number (optional)
- Session logs — sport, date, location, hours, role, and notes you enter
- Verification data — club membership and session verification status
- Device data — push notification tokens (platform and device identifier)
- Legal records — timestamps and device info when you accept our terms and this Privacy Policy
- Usage analytics — screens visited and interactions (via PostHog, anonymised)
2. How we use your data
We use your data to:
- Provide and operate the platform and its features
- Verify your watersports experience through clubs
- Send push notifications about session verifications and club activity
- Maintain a legally compliant record of your acceptance of our terms
- Improve the platform through anonymised analytics
- Comply with our legal obligations
3. Legal basis (GDPR)
We process your personal data on the following bases:
- Performance of contract — to deliver the service you signed up for
- Legitimate interests — improving our product and preventing fraud
- Legal obligation — where required by applicable law
4. Data storage and security
Your data is stored securely using Supabase (EU-West-2, London). We use row-level security to ensure you can only access your own data. Data is encrypted in transit (TLS) and at rest.
5. Data retention
We retain your account data for as long as your account is active. Acceptance records are retained for the lifetime of your account for compliance purposes. If you delete your account, personal data is deleted within 30 days except where required by law.
6. Third-party services
We share data with the following processors:
- Supabase Inc — database and authentication (EU region)
- PostHog Inc — product analytics (anonymised usage data only)
- Expo / Expo Push — push notification delivery
We do not sell your personal data to third parties.
7. Children's policy
Users under 13 must have verifiable parental consent. Users aged 13–17 should have parental awareness. We do not knowingly collect data from children without consent.
8. Your rights (GDPR)
You have the right to:
- Access — request a copy of your personal data
- Rectification — correct inaccurate data (use Edit Profile in the app)
- Erasure — request deletion of your account and data
- Restriction — ask us to pause processing in certain circumstances
- Portability — receive your data in a machine-readable format
- Object — to processing based on legitimate interests
To exercise any right, email: support@accrewal.com
9. Changes to this policy
We may update this Privacy Policy. We will notify you of material changes via the app. Continued use after changes constitutes acceptance.
10. Contact and complaints
Data controller: Accrewal · Email: support@accrewal.com
If you believe we have mishandled your data, you may lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk